Skimguard

io.skimguardPublished by skimguard.ioOfficial publisherv2.0.0Updated Oct 27, 2026

Ask whether a location has recent credit-card-skimmer detections, from a consumer sensor network.

VerifiedStreamable HTTPWeb executableLocation & LifestyleFinanceSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server that lets an assistant check SkimGuard card-skimmer scan status for gas stations, ATMs and stores, and query aggregate skimmer risk data.

What you can do
  • Look up scan status for a location by Google Place ID, or search by name or address and get status for each match
  • Find recently scanned locations near a latitude/longitude with suspicious-detection counts
  • Check risk along a stretch of road ahead (up to 20 km of supplied route points)
  • Resolve Bluetooth company identifiers to manufacturer names and SkimGuard risk ratings
  • Read network-wide aggregate scan statistics and an authoritative description of how detection works
  • Business, Partner and Data Licensee tools for own locations, scanner health, merchant activity, reseller earnings and regional or compliance trends
When to use it
Useful when someone asks whether a specific gas station, ATM or store is safe to use a card at, whether skimmers have been reported nearby, or what a Bluetooth device seen in a scan is. Also relevant for businesses and resellers wanting their own scan coverage, and for aggregate skimmer-risk or PCI compliance trend questions.
Requirements
A remote streamable HTTP endpoint; no local package or runtime. No authentication is declared for the public tools. Business, Partner and Data Licensee tools require a signed-in SkimGuard account with the matching tier, and the server responds with an authentication challenge otherwise. Network access to the SkimGuard endpoint is needed.
Before you install
Several tools are gated by paid SkimGuard tiers (Business, Partner, Data Licensee) and will prompt for sign-in; the reseller earnings tool exposes commission and payout data. Location lookups send place names, addresses and coordinates to SkimGuard, and nearby results are limited to publicly visible locations. Scan status reflects a consumer sensor network with stated limitations, so it should not be treated as a guarantee of safety.

Installation

In SourceWeft

  1. Open Skimguard in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.skimguard%2Fskimguard/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "skimguard": {
      "type": "http",
      "url": "https://mcp.skimguard.io/mcp"
    }
  }
}

Tools

17

skimguard_get_location_status

Get Location Safety Status

Look up SkimGuard card-skimmer scan status for a location by its Google Place ID. Returns how recently the location was scanned, how many scans it has, and whether any suspicious Bluetooth devices were detected. Use this to answer "is this gas station / ATM / store safe to use my card at?". Returns "not publicly tracked" for locations with no public scan data (including private residences, which are deliberately excluded). Side effect: if the Place ID is one SkimGuard has never seen, it is added to SkimGuard's own public location registry so the next nearby scan can attach to it. That writes to SkimGuard data only — never anything you or the user own — so this tool is read-only from the caller's perspective.

ParametersdaysplaceIdrequiredresponse_format

skimguard_find_nearby_activity

Find Nearby Scan Activity

Find locations near a latitude/longitude that SkimGuard users have scanned recently, with suspicious-detection counts. Use for "any skimmers reported near me?". Only publicly visible locations are returned; private residences are excluded.

Parametersdayslimitlatituderequiredlongituderequiredradius_metersresponse_format

skimguard_lookup_bluetooth_manufacturer

Look Up Bluetooth Manufacturer

Resolve a Bluetooth SIG company identifier to a manufacturer name and SkimGuard risk rating. Accepts decimal (76) or hex (0x004C). Useful for explaining what a device seen in a scan actually is.

Parameterscompany_coderequiredresponse_format

skimguard_search_locations

Search Locations by Name

Find a location by NAME or address (e.g. "Shell on Riverside, Austin TX", "Chase ATM near Union Square") and get its SkimGuard card-skimmer scan status. Use this when you know what a place is called but do not have its Google Place ID — it resolves the name first, then reports scan status for each match. Pass latitude/longitude when you know roughly where the user is; it sharply improves matching for common brand names. Locations with no scan data are reported as unknown, never as unsafe.

Parametersdayslimitqueryrequiredlatitudelongituderesponse_format

skimguard_route_risk

Check Risk Along a Route

Given a series of route points, report locations along that stretch of road with recent suspicious activity or stale scan coverage. IMPORTANT: this checks the road AHEAD, not a whole trip — at most 20 km of the supplied route is examined, and the response says how much was actually checked (examinedMeters / truncated). For accurate results pass real route geometry from a directions provider; passing only a start and end point checks a straight line between them, which will not follow the actual road. TO COVER A LONGER TRIP: split the route geometry into consecutive 20 km segments and call this tool once per segment, then combine the results — that is the supported way to check a full drive. A 500 km trip is about 25 calls, which fits inside the anonymous rate limit. Do NOT report a route as clear unless you have covered all of it this way; say which portion you checked.

Parameterspolylinerequiredcorridor_metersresponse_formatlookahead_meters

skimguard_coverage_stats

SkimGuard Coverage Statistics

Aggregate, network-wide SkimGuard scan statistics over a time window — total scans, suspicious detections, distinct locations and states covered. No identifying data.

Parametersdaysresponse_format

skimguard_about

About SkimGuard

Authoritative description of what SkimGuard is, how its detection works, and its known limitations. Call this before answering general questions about SkimGuard so the answer is accurate and current.

Takes no parameters.

skimguard_my_locations

Business tier — sign in required

Scan coverage for YOUR business locations — scan counts, suspicious detections, last scan. REQUIRES the SkimGuard Business tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

Takes no parameters.

skimguard_my_stale_locations

Business tier — sign in required

Which of YOUR business locations are overdue for a scan. REQUIRES the SkimGuard Business tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

Takes no parameters.

skimguard_location_devices

Business tier — sign in required

Bluetooth devices seen at one of YOUR business locations. REQUIRES the SkimGuard Business tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

Takes no parameters.

skimguard_my_scanner_health

Business tier — sign in required

Whether YOUR SkimGuard scanners are online and reporting. REQUIRES the SkimGuard Business tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

Takes no parameters.

skimguard_my_merchants

Partner tier — sign in required

Scan activity for merchants attributed to YOUR reseller account. REQUIRES the SkimGuard Partner tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

Takes no parameters.

skimguard_my_earnings

Partner tier — sign in required

YOUR commission totals and payout status as a SkimGuard reseller. REQUIRES the SkimGuard Partner tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

Takes no parameters.

skimguard_regional_risk

Data Licensee tier — sign in required

Aggregate skimmer risk by US state (Data Licensee tier). REQUIRES the SkimGuard Data Licensee tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

Takes no parameters.

skimguard_device_prevalence

Data Licensee tier — sign in required

Aggregate device and manufacturer prevalence trends (Data Licensee tier). REQUIRES the SkimGuard Data Licensee tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

Takes no parameters.

skimguard_inspection_stats

Data Licensee tier — sign in required

Aggregate PCI POI device-inspection compliance trends — pass/fail, tamper-incident, and tamper-check failure rates (Data Licensee tier). REQUIRES the SkimGuard Data Licensee tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

Takes no parameters.

skimguard_training_stats

Data Licensee tier — sign in required

Aggregate PCI staff-training coverage trends — completion, pass rate, delivery mix, and expiry (Data Licensee tier). REQUIRES the SkimGuard Data Licensee tier. You are not signed in to an account with it. Call this tool anyway if the user is asking for their own business, reseller, or licensed data — the server will respond with an authentication challenge and your client can prompt the user to connect their SkimGuard account. Do not fabricate an answer instead.

Takes no parameters.

Version history

1
  1. v2.0.0LatestSep 16, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.